OpenSSL CSR Wizard

  The fastest way to create your CSR for Apache (or any platform using OpenSSL)

Fill in the details, click Generate, then paste your customized OpenSSL CSR command into your terminal.

Certificate Details
Information
Making your CSR with OpenSSL is easy!

It looks like Javascript is disabled in your browser. If you enable Javascript, this panel will show helpful information as you switch from field to field.
Common Name (Server Name)

The fully qualified domain name that clients will use to reach your server.

To secure https://www.example.com, your common name must be www.example.com or *.example.com for a wildcard certificate.

Less commonly, you may also enter the IP address or short name of your internal server. For example, appserver1 or 192.168.1.200.
Department (optional)

Many people leave this field blank. This is the department within your organization which you want to appear in the certificate. It will be listed in the certificate's subject as Organizational Unit, or "ou."

Common examples:

  • Web Administration
  • Web Security
  • Marketing
City

The city where your organization is legally located.
State or Province

The state or province where your organization is legally located.
State

Your IP appears to be in the USA, so we've provided a States dropdown list for your convenience. But if you're creating a CSR for a location outside of the USA, you can enter anything into the list. It will accept any state name you type.
Country

We guessed your country based on your IP address, but if we guessed wrong, please choose the correct country. If your country does not appear in this list, there is a chance we cannot issue certificates to organizations in your country.
Organization name

The exact legal name of your organization. Example: "DigiCert, Inc."

Less commonly, if you do not have a legal registered organization name, you should enter your own full name here.
Key Size

Key sizes smaller than 2048 are considered insecure.
Now just copy and paste this command into a terminal session on your server. Your CSR will be written to ###FILE###.csr.
Where do I paste this command?

You can run this command wherever you have OpenSSL available—most likely on your server, but you can also run it on your own computer if you have OpenSSL installed. Just make sure you keep track of your private key file after you create your CSR, because you'll need that private key to install your certificate.

What happens when I run this command?

OpenSSL creates both your private key and your certificate signing request, and saves them to two files: your_common_name.key, and your_common_name.csr. You can then copy the contents of the CSR file and paste it into the CSR text box in our order form.

What kind of certificate should I buy?

If you want an SSL certificate for Apache, your best options are Single certificates and Wildcard certificates.

A DigiCert Wildcard can protect all server names on your domain (such as *.example.com). Our unlimited server license lets you protect all your servers for just one price. Many of our customers save thousands of dollars per year by using a DigiCert Wildcard.

Per Year Pricing
3 Years $475 per year ($1,425) (You Save 20%) Buy Now
2 Years $535 per year ($1,070) (You Save 10%) Buy Now
1 Year $595 Buy Now

Single certificates are able to protect one server name, such as mail.example.com. If you only need SSL for one hostname, a single certificate will work perfectly.

Per Year Pricing
3 Years $139 per year ($419) (You Save 20%) Buy Now
2 Years $157 per year ($315) (You Save 10%) Buy Now
1 Year $175 Buy Now

What if I need Subject Alternative Names?

Unified Communications certificates allow you to assign multiple host names—known as Subject Alternative Names or SANs—in one certificate.

Adding Subject Alternative Names to a CSR using OpenSSL is a complicated task. Our advice is to skip the hassle, use your most important server name as the Common Name, and specify the other names during the order process. Our UC certificate ordering process will let you specify all the names you need without making you include them in the CSR.

You can also use openssl to create a certificate request for your code signing certificate.
Si desea información en español a Hacer un CSR Utilizando OpenSSL.

Related: